N Page Subsection Original Text Comment Feedback to CG. Does a Reachable Party need to choose a NSP?

Transcription

1 A2A Instant messaging The TIPS Actors (Central Banks, TIPS participants, TIPS Reachable Parties and TIPS Instructing Parties) can choose their preferred Network Service Provider (NSP), The participants must always subscribe to both U2A and A2A services. Footnote : For the reference data management the Central Banks can subscribe the U2A service only. Figure 2 The NSP provides several functionalities: Technical Sender Authentication, CGU, nonrepudiation, encryption, NSP protocol transformation into and from the TIPS protocol. Does a Reachable Party need to choose a NSP? This point seems not to be fixed yet. Taking note of the discussions in the MIB Necessity for TIPS participants to access the TIPS GUI we see the need to wait before publishing this information. Another question is, if it will be possible to have different NSPs for each Service (U2A & A2A) Why is this statement restricted to «for reference data management»? We would assume that for a NCB in its role as a level 2 central bank (not becoming a TIPS participant itself) a U2A connection would be sufficient. If you see any obstacles in this view, i.e. any reasons why an A2A connection for NCBs to TIPS would be indispensable, please let us know. Is our assumption correct that Eurosystem user / Operator means 4CB and ECB access? Where are the NCBs to be found? We cannot find a technical description for the TIPS protocol in the TIPS connectivity requirements document, are there any other references? A2A File store and forward File transfer mode is used by TIPS Pla Does TIPS store the messages for 14 days if the NSP is unavailable? compliance check Central Banks and TIPS Participants can sponsor a NSP and then drive it through the compliance check process that is performed by the TIPS operator compliance check It will not be possible to start any new compliance check in the months following the Go-live. For this purpose the relevant CB will send an official communication to the requesting TIPS participants and to the ECB to include the NSP to the List of the Compliant TIPS NSPs. Figure In the second Meeting of the CG the Chair informed that Centalbanks might help NSPs if they do not find a participant which will sponsor/nominate them. Our question: Is the sponsoring/nomination linked to the usage of the NSP as service provider? If a CB has already chosen its NSP can it nominate another one without using this as its own NSP, just to make the NSP prove it is compliant? Is there a reason for this period? Until when has the compliance check to be completed in advance the Go-Live, also months? Since the Go-Live is mentioned here, maybe an overview of the time plan regarding NSP registration for the Go-Live should be included? Will this list be published? Please let us know when a decision is made Would it be possible to match the describtion below the figure, with the figure, i.e. Putting the numbers 1,2, into the boxes inside the figure? A Reachable Party cannot sponsor an NSP. This is possible for the only. The latter also on behalf of their Reachable Parties and/or Instructing Parties. With reference to NSP compliance check the TIPS participants have to sponsor only NSP that can offer both U2A and A2A services. Regarding the NSP CGU registration it is not mandatory for a TIPS participant to subscribe to both U2A and A2A. This aspect will need to be checked in details once the CGU registration workflow is available at the NSPs. With reference to NSP compliance check the TIPS participants have to sponsor only NSP that can offer both U2A and A2A services. The referenced bullet point and the foot note was removed because there is no obligation to subscribe to both U2A and A2A. It means 4CB only. The ECB and the CBs are in the Participant area. We changed Participant into Actor to be more comprehensive. This information will be availble in the Connectivity Requirements final version. Report files will be maintaned in ESMIG until the NSP confirms reception by the customer s/cbs sponsoring an NSP must sign During the months after the go live the 4CB teams will be dedicated with highest priority to the system operation. The NSP sponsoring is planned from 2 January 201 till 2 March 201. The NSP compliance can Date not yet available. The list will be handled by the ECB. The figure was updated NSP Central Bank Figure 10: Figure :. If the compliance check is completed unsuccessfully, the window. Is there a definition of the compliance check windows available? (See comment for figure.) Addtionally: Doesn t the CB receive a confirmation of the approval? The NSP sponsoring is planned from 2 January 201 till 2 March 201. The NSP compliance can Yes. The figure was updated.

2 CGU.2. Naming conventions and acronyms.2. Naming conventions and acronyms Figure 12 Figure Figure 14 Figure Participants send the registration form to their CB, also on behalf of their reachable and instructing parties. Once the TIPS actor is removed from the CGU, how will it be possible for him to remove his linkage with the NSP (blue box). Shouldn t this DN-Link be updated by the NCB. Here the Figure 12 is not consistent with the text. The CB updates the in TIPS The description of Figure ;10;;12 are numbered, here just bullets, Why? Additionally a proposal would be to put the numbers of the text also in to boxes in the figures to make it easier for the reader. This has to be more detailed. It is clear that in case a CB wants to be as CB the TIPS operator is responsible for the. This is not shown in Figure 14 (blue box just says Participant Data Setup). Furthermore it needs to be discussed why a CB, if already as CB, cannot itself as participant. There should be no need that this is done by the operator And again here it would be helpful if the numbers could be found in the boxes of the figure. As described above, Central Banks can also act as a Participant. In this case the TIPS operator will be responsible for setting-up their reference data: See Comment in Line 2 Figure 1 Liquidity Transfer: Message requesting a transfer of liquidity between a TIPS account and the relevant RTGS account, or between two TIPS accounts belonging to the same legal entity. Same as Figure, why couldn't the steps be numbered and matched with the boxes From our point of view a LT is not from TIPS account to TIPS account, only T2 to TIPS or vice versa. SSP: An integrated central technical infrastructure operated by Banca d Italia and Deutsche Bundesbank that provides the TARGET2 and TARGET2- Securities services. Shouldn t this be 4CB?.. Index of Figures Where are Figures,,,? Figure 2 - TIPS overall diagram and types of network.1.2. NSP Central Bank Point 2 under figure 10 "If the NSP is not already compliant." Point 1 under figure 12 "The TIPS actor sends a communication " 4th point under figure "the CB sends a request " rd point under figure 14 "the CB checks if the requestor" 4th point under figure 14 "the CB checks if the requestor" - Diagram should indicate NCB users - We suggest to have a bilaterale relationship between ESMIG and CRDM Could you please clarify how the NCB will ask the NSP to provide the technical documentation : is it in a formal way, such as a form filled by the NCB and sent to NSP? Could you please clarify what is the communication mean used by the TIPS actor : it would be useful to have a form filled by the actor to keep a track of the request The CB request to the TIPS operator should be made with an application form to fill If the step described here is considered as a legal validation, it should be done in the 1st step, before sending registration forms we suggest to modify the sentence as follows : "4. If the TIPS requirements are met and the forms are correct " The CB with the role of CB will be captured by the TIPS operator. Afterwards the CB can capture the participants including itself. Line 2 does not seem consistent. Nevertheless we understand the comment to allow the CB to itself as Participant. Comment not taken. No, the SSP is technically hosted and operated by Banca d'italia and Bundesbank. the figures numbering was reviewed. Yes, the figure was updated renaming TIPS Participant into TIPS Actors to include CBs. It was changed. It is the TIPS operator to ask the NSP. There is no guidance, it is left to the bilateral relationship. The TIPS Operator will remove the NSP related reference data included in the Registration form. Point is actually out of the scope of this process. It was removed. Point is actually out of the scope of this process. It was removed.

3 compliance check General remarks CB registration. TIPS Operator validates the signature compliance check Central Banks and TIPS Participants can sponsor a NSP A2A Instant messaging 2... U2A channel TIPS participants can sponsor one NSP 2nd bullet point: For the A2A, etc.. page : First line: The exchange of data between Actor and the NSP is compliant with a protocol defined by the relevant NSP rd line: In this context the NSP has to provide MAINLY connectivity, CGU and PKI services A2A File store and forward If the receiver. For 14 calendar days. User Registration and Compliance check processes Introduction TIPS Actors. 1. Scope TIPS actors can change be followed: page 14: Reachable parties, last sentence: However, the responsibility the transaction. "Basically this document describes the process to registrer to TIPS and to select a Network Service Provider (NSP)" The connectivity guide provides all the necessary It must be clear and unambiguously visible who has to do something to information. ensure that an NSP can be sponsored. It should be shown in the form of a table which of the actors (Participant, Reachable Parties or Instructing Parties) has to do what and in which form to sponsor an NSP for TIPS. Our discussion in the TIPS Contact Group has shown that there are still many question marks on the part of the participants. How does the TIPS Operator validate the CB signatures? As discussed in the CG also Instructing Parties can sponsor a NSP on behalf of one or more TIPS Participnats, please add in text. same, please add: or instructing parties on behalf of (s) 2 nd line states: not support "store and forward". This contradicts with 2..2 first sentence: the file transfer, etc Please explain which of the two is correct and please amend accordingly This contradicts with UHB The ESMIG interface is a gateway responsible and CONVERTING the NPS internal protocol. This is according to ING correct, please amend page first line accordingly. We agree with this: NSP has to be only technical connector; so no functional roles to be part of NPS: so we do not agree with last 2 nd lines 2..1 : The NPS provides several functionalities: : this means that NPS would be "man in the middle", which should not be the case: please clarify and amend In case of an Instant payment a storage of 14 days does not make any sense given time schedule of SCT Inst, please change. Next to technical compliancy, please describe in this chapter also rights and obligations of both TIPS actors and TIPS. This will provide more clarity and prevents incidents. Please describe whether this sequence can also be the other way around. If not possible please explicitly mention. In practice this is not real: please indicate where responsibilities are with reachable parties as well. Therefore described Roles & responsibilities in Connectvity Guide AND UDFS are vital. There is a typo in "registrer" Reference tp the signature removed. s/cbs sponsoring an NSP must sign s/cbs sponsoring an NSP must sign It was ameneded to clarify that SnF applies to File transfer only. The ESMIG converts the NSP protocol in the path between ESMIG and TIPS. The path between TIPS actor and NSP relies on NSP protocol. The functionalities to be provided by the NSP are clarified in the Connectivity Requirements. The connectivity guide is a process description document. This does not apply to Instant payments since they are not store and forward. This will be treated in the Harmonised Terms and Conditions. The two processes are not temporarily linked. Numbering was changed into bullet points. Figure amended as well. The description of the contractual responsabilities between the parties will be defined in the Harmonised Terms and Condition and is out of the scope of the Connectivity Guide.

4 "The TIPS Actors (Central Banks, TIPS participants, TIPS Reachable Parties and TIPS Instructing Parties) can choose their preferred Network Service Provider (NSP), provided that the selected NSP fulfils the TIPS Connectivity Requirements and has passed the Compliance Check done by the TIPS Operator. The TIPS Actor and an NSP can establish a contractual relationship only after the successful completion of the compliance check phase." "The TIPS Actors (Central Banks, TIPS participants, TIPS Reachable Parties and TIPS Instructing Parties)" During our 2nd meeting there was told there only CB and Participant can nominate NSP. This extract suggests that all the TIPS Actors are authorised to do this. In my opinion there is a need to clarify the rules related to the processes concerning NSP connection, eg. which TIPS Actors are eligible to nominate NSP, which ones have to sign the contractual agreements with the NSP ect. Apart from that, the extract "provided that the selected NSP fulfills the TIPS Connectivity Requirements and has passed the Compliance Check done by the TIPS Operator" could be misunderstood - it suggests that firstly the NSP should pass the compliance check, and only after the successful outcome of this process the TIPS Actor can nominate this particular NSP as its preferred NSP. I suppose in relation to the TIPS Actors names are applicable the definitions presented in the Glossary included in the UDFS? So I suggest that all the terms are written with a capital letter, e.g. TIPS Participants. "For the reference data management the Central Banks can Shouldn't be "subscribe to the U2A subscribe the U2A service only." service only"? (typo) FIGURE 1 TOWER OF BABEL CONNECTIVITY MODEL FIGURE 2 TIPS OVERALL DIAGRAM AND TYPES OF NETWORKS A2A Instant messaging A2A File store and forward compliance check "( ) the TIPS Platform communicates with its participants ( )" "File transfer mode is used by TIPS Platform only for outgoing exchanges, there is no business case which foresees its use for communications from the TIPS actor to the TIPS platform." "Central Banks and TIPS Participants can sponsor a NSP and then drive it through the compliance check process that is performed by the TIPS operator." s/cbs sponsoring an NSP must sign On the diagram the PSP1 and PSP4 It is possible to set up more than one NSP to send established connections with 2 different traffic to TIPS, but only one to receive. NSPs, so they has 2 different connection channels available. What is the reason - is it for security purposes or maybe it is temporary situation when changing the NSP? Could you please give the appropriate explanation in the document? Could you please provide the description concerning the figure 2 (giving detailes about the elements listed in the figure, the proceses illustrated by the arrows and the interactions between them)? Is the term "participants" used here in the meaning defined in the UDFS Glossary? If so, it should be written with a capital letter. If not maybe the other denomination should be used (TIPS Actors)? In the document sometimes some terms (TIPS Platform, TIPS Actors, Closed Group of Users) are written with a capital letter and the other time - with small letters. I think it needs unification and the indication to the relevant glossary (included in this very document or in the UDFS). If the only TIPS Actors which can nominate NSP are CBs and TIPS Participants, than Reachable Parties or Instructing Parties are not able to use the other NSP? So all in all they may choose only from the NSPs which have already been certified or nominated by CBS or s? If I understand correctly, Participant which nominates the given NSP is not obliged to enter into contractual agreement with this NSP, even if the latter has passed the compliance check process? Could you please include these rules in the document? This is out of the scope of the Connectivity Guide. Further details available in the Connectivity Requirements and in the UDFS. s/cbs sponsoring an NSP must sign

5 "The NSP compliance check process aims to ensure that the Connectivity Solution provided by the NSP chosen by the TIPS Actor No. The final version is to be provided. compliance check fulfils the requirements described in TIPS Connectivity Requirements v the TIPS Connectivity Requirements." deted 21/04/201 is the final version or it will be ammended? 4 0 "It will not be possible to start any compliance check new compliance check in the months following the Go-live." "For this purpose the relevant CB will send an official communication to the requesting TIPS participants and to the ECB to include the NSP to the List of the Compliant TIPS NSPs." This senteence seems not very clear. Does it mean is not able to change the NSP in the months period following its go-live? I think the claricication might be helpful. Does this List of the Compliant TIPS NSPs will be published in the ECB site? I think it could be helpful. It can change to another compliant NSP. The list will be handled by the ECB. 1 2 FIGURE 4 NSP COMPLIANCE CHECK PROCESS FOR A TIPS PARTICIPANT Point 4b: "If the documentation check is not successful, the window." Point : "If the compliance check is completed unsuccessfully, the window." I think the part of the diagram illustrating the compliance check process performed by TIPS operator might be misleading. Maybe the rectangular "compliance check" should concern only the documentation (e.g. "documentation compliance check") and the rectangular "Delivers connectivity components for <<real>> testing" should lead to the "NSP compliant" diamond. I think it is not illustrated correctly in the diagram above - the diagram suggests that in case of documentation compliance check failure the process is not finiched but could be repeated without the necessity of waiting to the next compliance check window. Could the decission on joining the following compliance window be made directly by the NSP or it requires the intermediation and cooperation with the relevant Central Bank? It requires the intermediation and the cooperation of the sponsoring /CB NSP Central Bank FIGURE NSP COMPLIANCE CHECK PROCESS FOR A CENTRAL BANK I suppose one arrow is missing (the one joining the rectangulars ""Provides documentation on their technical solution..." and "Compliance check". Apart from that in my opinion the part of the diagram illustrating the compliance check process performed by TIPS operator might be misleading. Maybe the rectangular "compliance check" should concern only the documentation (e.g. "documentation compliance check") and the rectangular "Delivers connectivity components for <<real>> testing" should lead to the "NSP compliant" diamond NSP Central Bank Point 4b: "If the documentation check is not successful, the window." I think it is not illustrated correctly in the diagram above - the diagram suggests that in case of documentation compliance check failure the process is not finiched but could be repeated without the necessity of waiting to the next compliance check window. FIGURE NSP DISMISSAL FOR A TIPS PARTICIPANT The abbreviation of the term Closed Group of Users appeard sometimes in text as CGU, and in other cases as CUG (in the diagram).

6 CGU.2.2. CGU.2.2. CGU 4. NSP documentation.2.2. CGU 1.1. References FIGURE NSP DISMISSAL FOR A TIPS PARTICIPANT: "NSP sends a communication to NCB once the TIPs actor dismissal is completed" FIGURE NSP DISMISSAL FOR A TIPS PARTICIPANT FIGURE NSP DISMISSAL FOR A TIPS PARTICIPANT: "TIPS Actor deletes the linkage with the NSP in TIPS" FIGURE NSP DISMISSAL FOR A CB: "The NSP checks the validity of the signature and removes the CB from the CGU" "The CBs send the registration form to the TIPS Operator." "the new shall be scheduled and activated ensuring the availability of the service (e.g. adopting the "rolling update" approach)." FIGURE 10 CGU SUBSCRIPTION WORKFLOW FIGURE 10 CGU SUBSCRIPTION WORKFLOW I suppose it should be "NSP sends a confirmation ". The term NCB should be defined in the glossary (generally in the documentation it is used CB defined in the UDFS glossary). I think there is a typo in the "TIPs actor" - shouldn't be "TIPS Actor"? The same remark concerns "NSP removes all TIPS actor users certificates" rectangular. The s exchanged between TIPS Actors should be encoded? Maybe this rule could be included in the process description below? I think the description of the process do not comprises all the steps presented in the diagram. How is the step "TIPS Actor deletes the linkage with the NSP in TIPS" performed? Shouldn't it be done in the TIPS by TIPS operator? Shouldn't be "The NSP removes all CB users certificates" insteead of "The NSP checks the validity of the signature"? I think after this sentence should be added "also on behalf of their reachable and instructing parties.", just like in the registration proces description. By the way, the terms defined in the glossary (Reachable Party, Instructing Party) should be written wih a capital letter. It is not fully clear for me. Could you please clarify this in more detail? I suppose the answer to the approval request should be sent by CB and TIPS Operator to the NSP. It is not illustrated on the diagram. Moreover the outcome of the TIPS Operator verification is provided to the. I think it should be delivered to the NSP, and then NSP should inform aout the approval or rejestion the TIPS Participant. TIPS Actor on the diagram should be only or CB? There should be separate diagram variant in case of the request sent directly by the CB. There is no guidance, it is left to the bilateral relationship. The sentence about signature validation was removed. The CB with the role of CB will be captured by the TIPS operator: in this case the CBs send the form to the TIPS operator. Afterwards the CB can capture the any kind of TIPS actors itself. Once the activation timing of the NSP is known, the TIPS actors have to submit the form in advance to ensure that the CGU is open when needed. This question will be answered in details once each NSP CGU workflow is available. Figure added. "The procedure to procure the Is there any guide providing more exhaustive information on the data This information will be availble in the Connectivity Requirements final version. certificates is described in the NSPs required to be included in the NSPs User User documentation." documentation? Figure 10 CGU TIPS Compliance Check who (the NSP/the TIPS Actor) takes the initiative to enable a TIPS actor to become a member in the CGU? According to the Figure the TIPS Actor contacts the NSP via the Website. And the CB is informed via the NSP? Could you please further specify? Please include the date of the first / next version Please clarify this point because The TIPS Actor and an NSP can currently this is not possible as no NSP establish a contractual relationship is yet complaint. According to the 2nd only after the successful completion TIPS meeting this issue has been of the compliance check phase. delaying internal projects of payment banks. This question will be answered in details once each NSP CGU workflow is available. The NSP sponsoring is planned from 2 January 201 till 2 March 201. The NSP compliance can The next Compliance check window will start at the earliest months after Go Live. s/cbs sponsoring an NSP must sign

7 Comment not taken. For the reference data For the reference data management the 2.2. Connectivity management the Central Banks can Central Banks may decide to subscribe subscribe the U2A service only. the U2A service only. ( FIGURE 1 TOWER OF BABEL CONNECTIVITY MODEL This figure could include further relationships between TIPS participants, Reachable parties and Instructing Parties (not only PSPs) and demonstrate that these relationships may be held with different NSPs (for instance, the relationship between TIPS and a TIPS participant may be managed via one NSP while the relationship between this TIPS participant and one of its Reachable Parties may be managed via a differente NSP). Form to be provided By whom and when? 1 FIGURE NSP CHANGE PROCESS Figure 2 figure The participants must always subscribe to both U2A and A2A services - footnote: For the reference data management the Central Banks can subscribe the U2A service only. compliance check window Figure should explicitly show both processes as simultaneous. Is "TIPS back-up" (figure 2) the same as the "TIPS site 2" (figure 1)? The figure seems to show that the Eurosystem user/ Operator can connect to TIPS in U2A via 4CBNet. Woudl it mean that a NCB can use this connection? Would it be sufficient to fufil all the communication requirements (static data, billing file, general ledger file, Trouble Management System) in TIPS? Would it be possible and sufficient for CBs (acting as central bank only) to use Corenet to connect to TIPS? Please clarify if a central bank needs to subscribe A2A communication mode to fulfill all its responsibilities as central bank (not acting as Participant). When will the compliance check windows be published? the figure does not display the "yes" to the box "NSP already compliant" List of the Compliant TIPS NSPs How shall the list be shared?.2. Naming conventions and acronyms TIPS actors can change the NSP currently used to access the TIPS services figure 14, Participants figure 14 - blue boxes European Single Market Infrastructure Gateway ESMIG align wording used in the section: "dismissal" or "discontinuance" Do the dismissal of a NSP and the use of a new NSP processes need to be coordinated, to ensure the Participant does not encounter NSP service interruption? As the sponsorship of a NSP is of the responsibility of a Participant (or CB), can the any Actor dismiss a NSP or only the Participant? align wording and colour with other figures in the document Do the word "participant" in the blue boxes refer to "central bank"? Eurosystem Comment not taken. This is out of scope of the Connectivity Guide. By the 4CB by the Contact Group meeting in January. Yes No, this connection is available for 4CB only. Yes if the Corenet provider is sponsored and passes the compliance check. No, U2A is sufficient. The NSP sponsoring is planned from 2 January 201 till 2 March 201. The NSP compliance can The next Compliance check window will start at the earliest months after Go Live. The list will be handled by the ECB. Updated. This is under the responsability of the TIPS actor s/cbs sponsoring an NSP must sign As a result if a RP or an IP want to dismiss an NSP, they have to rely on their TIPS participant who signed the contract with that NSP.